General
- Target 849236c4f378100488c69a94fb7eb43e5a52a465f6d4beead2a7716d99986196
- Size 2.5MB
- Sample260820-mm7grsvdqd
- SHA256 849236c4f378100488c69a94fb7eb43e5a52a465f6d4beead2a7716d99986196
- MD5 37db8b8d5804e279b1577c26ef793f76
- SHA1 51e2237be7a9f1056c6aab4cfb8d132b882134fc
- SHA512 c64bf782c4528ba1b3bef921549554cf63cc419cc5538be01f48f7b65602f38b321c5aa302fb73c4359111b9d49c4ef1cdc8b749aa3b18831e71273694711b74
- SSDEEP 49152:gj34I84BT1pwh36ITW+1cP9SvzJVhl5IkGcc6o+H5JoNgsHxIzPhp0eSv7S+AHph:Pz4BM36ITW+1cP9SvzJVb3Geo+Z4gYxO
- TLSH T156C5BDD19140BD25F2112C39E4926B3F8A07E1C52B3E186AF45DD674B0DF9FA8287F4A
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
849236c4f378100488c69a94fb7eb43e5a52a465f6d4beead2a7716d99986196.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target 849236c4f378100488c69a94fb7eb43e5a52a465f6d4beead2a7716d99986196
- Size 2.5MB
- SHA256 849236c4f378100488c69a94fb7eb43e5a52a465f6d4beead2a7716d99986196
- MD5 37db8b8d5804e279b1577c26ef793f76
- SHA1 51e2237be7a9f1056c6aab4cfb8d132b882134fc
- SHA512 c64bf782c4528ba1b3bef921549554cf63cc419cc5538be01f48f7b65602f38b321c5aa302fb73c4359111b9d49c4ef1cdc8b749aa3b18831e71273694711b74
- SSDEEP 49152:gj34I84BT1pwh36ITW+1cP9SvzJVhl5IkGcc6o+H5JoNgsHxIzPhp0eSv7S+AHph:Pz4BM36ITW+1cP9SvzJVb3Geo+Z4gYxO
- TLSH T156C5BDD19140BD25F2112C39E4926B3F8A07E1C52B3E186AF45DD674B0DF9FA8287F4A
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.